Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
File: kIFN053Tklz_iL801DB_1sYhZes.mft (raw, json)
Hash identifier: g61/+54tJG6zbLhILrEfDb1gcVIrVGKv4SEDkUtSrbg=
Subject key identifier: DD:C0:8E:FF:1D:1D:CA:0E:FB:CE:3A:C2:BD:FE:FC:17:F6:68:C7:8F
Authority key identifier: 90:81:4D:D3:9D:D3:92:5C:FF:88:BF:34:D4:30:7F:D6:C6:21:65:EB
Certificate issuer: /CN=90814dd39dd3925cff88bf34d4307fd6c62165eb
Certificate serial: 0196BBC9183624AF5649959404FC7EBF0323
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
Manifest number: 0764
Signing time: Sat 10 May 2025 20:00:40 +0000
Manifest this update: Sat 10 May 2025 20:00:40 +0000
Manifest next update: Sun 11 May 2025 20:00:40 +0000
Files and hashes: 1: I1YCEfbbjRZSc_xIUFyDblYriwE.roa (hash: eOZKe0lo11jreas9XGaAS+8tYDTXuTVMymwF1+Z+Yug=)
2: hWSKcMqeZaW4Zv4jBiknXOuGsW8.roa (hash: 2qZdD5hbe6sIKnLdKsWHsV9kY8NKZnUdaQZKVQK/Jyo=)
3: kIFN053Tklz_iL801DB_1sYhZes.crl (hash: f2DtYUf6jE5xbIcreiXuL/ngunAYOnBdnkGPX3OlICc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:c9:18:36:24:af:56:49:95:94:04:fc:7e:bf:03:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90814dd39dd3925cff88bf34d4307fd6c62165eb
Validity
Not Before: May 10 20:00:40 2025 GMT
Not After : May 11 20:00:40 2025 GMT
Subject: CN=ddc08eff1d1dca0efbce3ac2bdfefc17f668c78f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:63:b4:95:b8:83:33:da:68:2b:d4:d2:e6:79:
00:8b:1c:0e:2a:42:71:e0:1a:39:ab:d1:a5:d2:cb:
44:8d:b0:dd:52:52:a2:0f:87:f4:4b:c7:b3:bc:4d:
62:71:83:fd:92:ac:0a:ac:ee:85:8f:7e:f3:56:c7:
6b:ab:35:a3:1a:e4:35:5e:f8:77:2b:6c:f0:bd:e4:
36:cd:b2:d5:c9:48:4e:c0:47:8c:72:92:7c:01:96:
92:9c:81:9d:4f:0f:5e:91:e0:51:5b:6c:8d:ba:ad:
bb:3d:ee:a6:f4:ce:a2:02:87:24:2e:63:75:34:e7:
65:60:e1:24:a8:cd:20:9e:eb:9b:ab:95:76:2d:52:
c7:b7:05:ae:14:b7:15:25:21:9f:eb:7e:f9:06:b3:
79:5f:ca:f4:84:08:32:42:36:6f:07:9a:f3:d4:b9:
6b:24:0f:b2:be:e8:65:0f:f6:94:81:6b:da:7d:50:
ea:bb:ce:2a:4e:5a:77:f2:eb:9b:fa:73:70:c9:57:
2e:45:e9:72:44:c0:3e:74:e3:ee:90:ca:ff:b1:1e:
99:9c:33:1b:e2:dc:bb:8b:ec:cd:db:98:e2:cc:26:
d0:7f:e8:ee:6c:f6:e7:bf:bc:73:6f:78:c6:93:dd:
6b:6c:ce:1e:73:77:0e:c4:67:27:66:91:ef:36:9d:
3f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C0:8E:FF:1D:1D:CA:0E:FB:CE:3A:C2:BD:FE:FC:17:F6:68:C7:8F
X509v3 Authority Key Identifier:
keyid:90:81:4D:D3:9D:D3:92:5C:FF:88:BF:34:D4:30:7F:D6:C6:21:65:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:2c:73:ec:76:e1:0c:5a:c5:33:20:2d:5c:37:38:13:a4:e4:
94:98:b3:0c:74:1c:15:58:ad:89:57:01:92:99:a2:80:cf:a1:
50:0f:fd:41:1c:77:2a:d6:4e:a5:0f:93:b7:af:e1:79:06:28:
12:df:b6:45:53:06:04:73:21:3e:66:71:18:22:96:6f:0c:b0:
39:1e:9d:a9:07:3f:a2:f8:22:f9:e8:ae:0f:57:37:89:d5:0c:
4c:52:dd:39:82:8d:56:18:28:d8:03:dd:2b:91:17:91:2d:84:
d1:7e:87:47:70:0a:f0:a2:03:71:78:0a:14:43:b5:e0:ac:3a:
48:2c:94:b5:1b:aa:d1:7d:3a:63:1b:21:57:a2:d1:a5:37:a3:
e7:f4:68:f6:a4:dd:bd:17:6b:fa:b3:28:ac:1f:c9:98:30:47:
b2:07:83:b7:8b:18:ca:b8:96:63:28:d2:14:1c:a5:b9:5f:16:
e0:24:1f:75:8c:3a:3a:72:03:d3:af:f2:38:92:6e:ea:6e:da:
09:3b:f3:d6:43:c2:70:ca:87:3b:3a:56:dc:74:74:3c:55:25:
12:21:d8:78:79:c2:e2:fb:0d:78:a8:1b:2c:2d:bd:fb:b7:26:
f6:7d:f2:8a:d8:88:2b:c6:d1:d2:42:9a:7b:cb:ca:04:70:2a:
45:50:e7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:16:21 2025 by rpki-client